CVE-2026-40404
Awaiting Analysis Awaiting Analysis - Queue
UDFS Elevation of Privilege Vulnerability in Windows

Publication date: 2026-06-09

Last updated on: 2026-06-09

Assigner: Microsoft Corporation

Description
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-06-09
Last Modified
2026-06-09
Generated
2026-06-10
AI Q&A
2026-06-09
EPSS Evaluated
N/A
NVD
CVE-2026-40404
EUVD
EUVD-2026-35656
Affected Vendors & Products
Showing 2 associated CPEs
Vendor Product Version / Range
microsoft windows_universal_disk_format_file_system_driver *
microsoft udfs *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-122 A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
CWE-197 Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Compliance Impact

This vulnerability allows elevation of privilege, which can lead to unauthorized access or control over affected systems.

Such unauthorized access or control can potentially result in breaches of sensitive data, thereby impacting compliance with data protection standards and regulations like GDPR and HIPAA.

However, specific details on compliance impact are not provided in the available resources.

Mitigation Strategies

The vulnerability CVE-2026-40404 is an Elevation of Privilege issue affecting the Windows Universal Disk Format File System Driver.

To mitigate this vulnerability, it is recommended to apply the security updates provided by Microsoft as soon as possible.

Refer to the official Microsoft security update guide for CVE-2026-40404 to obtain and install the necessary patches.

Executive Summary

CVE-2026-40404 is an elevation of privilege vulnerability in the Windows Universal Disk Format File System Driver (UDFS). This means that an attacker who successfully exploits this vulnerability could gain higher privileges on the affected system than they are normally allowed.

Impact Analysis

This vulnerability can allow an attacker to elevate their privileges on a Windows system, potentially gaining unauthorized access to sensitive information or the ability to execute actions that require higher permissions. The CVSS base score of 7.8 indicates a high severity with impacts on confidentiality, integrity, and availability.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-40404. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart